meta-audit
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes shell-based context injection via
!findcommands to automatically list agent definition files and settings files. These commands are used for environment discovery within the project's agent configuration directory and do not involve network access or sensitive file exposure. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze third-party agent configuration files. While this presents an indirect prompt injection surface where instructions in audited files could influence the auditing agent, the risk is minimal given the read-only audit workflow.
- Ingestion points: Agent definition files and
settings.local.jsonidentified via discovery commands inSKILL.md. - Boundary markers: None explicitly instructed for the processing of configuration files.
- Capability inventory: File discovery and reading (
Glob,Read) and status tracking (TodoWrite) as defined inallowed-tools. - Sanitization: None identified for the analysis of file content.
Audit Metadata